364 matches found
Advantech WebAccessNode Code Execution Vulnerability in Advantech Technology (China) Co.
Advantech China Co., Ltd. is a global manufacturer in the intelligent system industry. A code execution vulnerability exists in Advantech WebAccessNode of Advantech Technology China Co. Ltd. that can be exploited by an attacker to gain server administrator privileges...
SimplePHPGal 0.7 - Remote File Inclusion Vulnerability
Exploit for php platform in category web applications Title: SimplePHPGal 0.7 - Remote File Inclusion Author: h4shur Vendor Homepage: https://johncaruso.ca Software Link: https://johncaruso.ca/phpGallery/ Software Link: https://sourceforge.net/projects/simplephpgal/ Tested on: Windows 10 & Google...
File Upload Vulnerability in CRMEB Open Edition V3.1.0
CRMEB mall system is based on ThinkPhp6.0 + Vue development of a set of new retail mobile e-commerce system, CRMEB system is a set of customer relationship management + marketing e-commerce system, can quickly accumulate customers, member data analysis, intelligent conversion of customers,...
Code Execution Vulnerability in CRMEB Open Edition V2.6.13
CRMEB system is a set of customer relationship management + marketing e-commerce system, can really help enterprises based on WeChat public number, small program, to realize the member relationship management, data analysis, accurate marketing e-commerce management system. CRMEB Open Version...
HuCart suffers from a file upload vulnerability (CNVD-2020-25572)
HuCart is a PHP+Mysql based enterprise building system that can run on various server platforms such as Linux and Windows. HuCart has a file upload vulnerability, which can be exploited by attackers to upload malicious files and obtain server administrative privileges...
File Upload Vulnerability in opencart 3.6
OpenCart is an open source e-commerce system. A file upload vulnerability exists in opencart 3.6, which can be exploited by an attacker to execute commands and gain server administrator privileges...
EulerOS 2.0 SP5 : openldap (EulerOS-SA-2019-1914)
According to the version of the openldap packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An issue was discovered in the server in OpenLDAP before 2.4.48. When the server administrator delegates rootDN database admin privileges for...
CVE-2019-12843: Improper Control of Generation of Code
A possible stored JavaScript injection requiring a deliberate server administrator action was detected. The issue was fixed in JetBrains TeamCity 2018.2.3...
File upload vulnerability in the background ap***_co***.php file of PHPOK enterprise website building system
PHPOK is a set of enterprise station CMS system developed in PHP + MYSQL language. A file upload vulnerability exists in the apco.php file in the background of the PHPOK enterprise website system. Remote attackers can use this vulnerability to obtain server administrative privileges...
PT-2019-12982
Name of the Vulnerable Software and Affected Versions JetBrains TeamCity versions prior to 2018.2.3 Description A possible stored JavaScript injection was detected, requiring a deliberate server administrator action. Recommendations For versions prior to 2018.2.3, update to version 2018.2.3 or...
CVE-2019-3723
Dell EMC OpenManage Server Administrator OMSA versions prior to 9.1.0.3 and prior to 9.2.0.4 contain a web parameter tampering vulnerability. A remote unauthenticated attacker could potentially manipulate parameters of web requests to OMSA to create arbitrary files with empty content or delete th...
CVE-2019-3722 XML External Entity (XXE) Injection Vulnerability
Dell EMC OpenManage Server Administrator OMSA versions prior to 9.1.0.3 and prior to 9.2.0.4 contain an XML external entity XXE injection vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to read arbitrary server system files by supplying specially...
CVE-2019-3722
Affected software/Component: Dell EMC OpenManage Server Administrator (OMSA). Vulnerability: XML External Entity (XXE) injection in OMSA prior to 9.1.0.3 and prior to 9.2.0.4. Root cause: XXE vulnerability allowing external entities to be processed in XML requests. Impact: Potential remote read o...
PT-2019-16667
Name of the Vulnerable Software and Affected Versions Dell EMC OpenManage Server Administrator OMSA versions prior to 9.1.0.3 Dell EMC OpenManage Server Administrator OMSA versions prior to 9.2.0.4 Description The issue is related to an XML external entity XXE injection. A remote unauthenticated...
CVE-2019-3722: Improper Restriction of XML External Entity Reference
Dell EMC OpenManage Server Administrator OMSA versions prior to 9.1.0.3 and prior to 9.2.0.4 contain an XML external entity XXE injection vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to read arbitrary server system files by supplying specially...
CVE-2019-3723: Improper Input Validation
Dell EMC OpenManage Server Administrator OMSA versions prior to 9.1.0.3 and prior to 9.2.0.4 contain a web parameter tampering vulnerability. A remote unauthenticated attacker could potentially manipulate parameters of web requests to OMSA to create arbitrary files with empty content or delete th...
PT-2019-16668
Name of the Vulnerable Software and Affected Versions Dell EMC OpenManage Server Administrator OMSA versions prior to 9.1.0.3 Dell EMC OpenManage Server Administrator OMSA versions prior to 9.2.0.4 Description The issue allows a remote unauthenticated attacker to manipulate parameters of web...
CVE-2018-4056
An exploitable SQL injection vulnerability exists in the administrator web portal function of coTURN prior to version 4.5.0.9. A login message with a specially crafted username can cause an SQL injection, resulting in authentication bypass, which could give access to the TURN server administrator...
